Experian Netherlands has been fined €2.7 million ($3.2 million) by the Dutch Data Protection Authority (AP) for multiple violations of the General Data Protection Regulation (GDPR).
The authority found that the company collected and used personal data from several public and private sources without properly informing people or obtaining their consent.
Experian is one of the world’s largest credit reporting and data analytics firms, operating in more than 40 countries. It provides risk evaluation services to banks and lenders, helping them assess individuals and businesses before extending credit. The company also sells data protection and credit monitoring services and often assists organizations that suffer data breaches by helping protect their customers from potential financial losses.
The Dutch regulator began investigating Experian after receiving complaints from people who faced financial difficulties, such as being unable to pay installments or being forced to pay high deposits when switching energy providers. The AP discovered that these issues were linked to credit scores supplied by Experian, which directly affected loan interest rates and upfront payments.
According to AP chair Aleid Wolfsen, people were unaware that Experian had performed credit checks on them and therefore couldn’t verify or correct any errors in their records. The investigation revealed that Experian had compiled a large database containing personal information about a vast number of Dutch citizens, using data gathered from sources like the Chamber of Commerce, telecom providers, and energy companies that sold customer information.
The AP concluded that Experian failed to properly inform individuals about how their data was collected and used, did not seek consent, and had no valid legal reason for processing the data. Until January 1, 2025, the company had been offering credit assessments to its clients based on details such as late payments, outstanding debts, and bankruptcies, all gathered without proper authorization.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
As a result, the AP imposed a €2.7 million fine on Experian Netherlands. The company accepted the ruling and confirmed it would not appeal the decision. It has since shut down its operations in the Netherlands and promised to delete its entire database of personal data by the end of the year.
